robert/.dotfiles
Watch
1
0
Fork
You've already forked .dotfiles
 0
Code Issues 1 Pull requests 5 Projects Releases Packages Wiki Activity Actions

Update dependency yq to v4.54.3 #5

Open
robert wants to merge 1 commit from renovate/yq-4.x into main
pull from: renovate/yq-4.x
merge into: robert:main
Conversation 0 Commits 1 Files changed 1 +1 -1
robert commented 2026-09-30 04:00:27 +00:00
Owner

This PR contains the following updates:

Package Type Update Change
yq tools minor 4.53.6 → 4.54.3

Release Notes

mikefarah/yq (yq)

v4.54.3

Compare Source

  • Fixed preservation of YAML aliases across documents within the same input stream, without leaking anchors between files (#​2956) Thanks @​ingydotnet
    • Restricted --split-exp output paths to the current directory by default. Use --security-allow-write-any-path with trusted input to restore the previous behaviour (#​2965)
    • Fixed --inplace to reject direct updates to read-only files and replace symbolic links instead of modifying their targets. (#​2973)

v4.54.2

Compare Source

  • Fixed command injection risk in shell output with -o=shell -r: unsafe values are now quoted and a warning is logged. Use --security-force-never-escape-shell-output to restore the previous unsafe behaviour (GHSA-h2cv-65fq-jgrp)

v4.54.1: - if-then-else

Compare Source

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate CLI.

This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [yq](https://github.com/mikefarah/yq) | tools | minor | `4.53.6` → `4.54.3` | --- ### Release Notes <details> <summary>mikefarah/yq (yq)</summary> ### [`v4.54.3`](https://github.com/mikefarah/yq/releases/tag/v4.54.3) [Compare Source](https://github.com/mikefarah/yq/compare/v4.54.2...v4.54.3) - Fixed preservation of YAML aliases across documents within the same input stream, without leaking anchors between files ([#&#8203;2956](https://github.com/mikefarah/yq/issues/2956)) Thanks [@&#8203;ingydotnet](https://github.com/ingydotnet) - Restricted `--split-exp` output paths to the current directory by default. Use `--security-allow-write-any-path` with trusted input to restore the previous behaviour ([#&#8203;2965](https://github.com/mikefarah/yq/issues/2965)) - Fixed `--inplace` to reject direct updates to read-only files and replace symbolic links instead of modifying their targets. ([#&#8203;2973](https://github.com/mikefarah/yq/issues/2973)) ### [`v4.54.2`](https://github.com/mikefarah/yq/releases/tag/v4.54.2) [Compare Source](https://github.com/mikefarah/yq/compare/v4.54.1...v4.54.2) - Fixed command injection risk in shell output with `-o=shell -r`: unsafe values are now quoted and a warning is logged. Use `--security-force-never-escape-shell-output` to restore the previous unsafe behaviour (GHSA-h2cv-65fq-jgrp) - Fixed YAML structure being changed when assigning head comments ([#&#8203;2847](https://github.com/mikefarah/yq/issues/2847)) Thanks [@&#8203;rootsec1](https://github.com/rootsec1) - Fixed `ireduce` to run per pipeline input, matching jq's `reduce` behaviour ([#&#8203;2869](https://github.com/mikefarah/yq/issues/2869)) Thanks [@&#8203;00200200](https://github.com/00200200) - Fixed `map_values` to remove entries when the expression returns nothing ([#&#8203;2862](https://github.com/mikefarah/yq/issues/2862)) Thanks [@&#8203;yuefdev](https://github.com/yuefdev) - Fixed preservation of comments on TOML inline table values ([#&#8203;2879](https://github.com/mikefarah/yq/issues/2879)) Thanks [@&#8203;iamhuman-cheolheelee](https://github.com/iamhuman-cheolheelee) - Fixed INI keys containing colons ([#&#8203;2886](https://github.com/mikefarah/yq/issues/2886)) - Fixed YAML line numbers after header preprocessing ([#&#8203;2939](https://github.com/mikefarah/yq/issues/2939)) Thanks [@&#8203;imharjot](https://github.com/imharjot) - Fixed an extra leading comment blank line with CRLF input ([#&#8203;2856](https://github.com/mikefarah/yq/issues/2856)) Thanks [@&#8203;cestercian](https://github.com/cestercian) - Cleaned up failed in-place edits ([#&#8203;2920](https://github.com/mikefarah/yq/issues/2920)) Thanks [@&#8203;Boulea7](https://github.com/Boulea7) - Bumped dependencies ### [`v4.54.1`](https://github.com/mikefarah/yq/releases/tag/v4.54.1): - if-then-else [Compare Source](https://github.com/mikefarah/yq/compare/v4.53.6...v4.54.1) - Added jq style `if-then-elif-else-end` conditional operator ([#&#8203;2871](https://github.com/mikefarah/yq/issues/2871)) Thanks to [@&#8203;anandghegde](https://github.com/anandghegde) - Added `@base64url`/`@base64urld` operators (RFC 4648 §5) ([#&#8203;2827](https://github.com/mikefarah/yq/issues/2827)) Thanks [@&#8203;MsfPablo](https://github.com/MsfPablo) - Fixed: preserve explicit assignments in read-only expressions ([#&#8203;2850](https://github.com/mikefarah/yq/issues/2850)) Thanks [@&#8203;RRXXZZYY](https://github.com/RRXXZZYY) - Fixed: error on int64 overflow in +, -, \* instead of silently wrapping ([#&#8203;2826](https://github.com/mikefarah/yq/issues/2826)) Thanks [@&#8203;MsfPablo](https://github.com/MsfPablo) - Fixed(toml): quote empty keys ([#&#8203;2870](https://github.com/mikefarah/yq/issues/2870)) Thanks [@&#8203;jakezwang](https://github.com/jakezwang) - Fixed: /dev/null was triggering colour output ([#&#8203;2852](https://github.com/mikefarah/yq/issues/2852)) Thanks [@&#8203;laraibg786](https://github.com/laraibg786) - Fixed dead snapcraft confinement link in README ([#&#8203;2840](https://github.com/mikefarah/yq/issues/2840)) Thanks [@&#8203;ShurongCAO](https://github.com/ShurongCAO) - Bumped dependencies </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate CLI](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC41LjAiLCJ1cGRhdGVkSW5WZXIiOiI0NC4xODEuMCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOltdfQ==-->
robert force-pushed renovate/yq-4.x from b59b4b094d to e05f5f14cf 2026-11-06 04:00:29 +00:00 Compare
robert changed title from Update dependency yq to v4.54.1 to Update dependency yq to v4.54.2 2026-11-06 04:00:29 +00:00
robert force-pushed renovate/yq-4.x from e05f5f14cf to b85767bfdf 2026-11-10 04:00:29 +00:00 Compare
robert changed title from Update dependency yq to v4.54.2 to Update dependency yq to v4.54.3 2026-11-10 04:00:30 +00:00
This pull request can be merged automatically.
You are not authorized to merge this pull request.
View command line instructions

Checkout

From your project repository, check out a new branch and test the changes.
git fetch -u origin "renovate/yq-4.x:renovate/yq-4.x"
git switch "renovate/yq-4.x"

Merge

Merge the changes and update on Forgejo.

Warning: The "Autodetect manual merge" setting is not enabled for this repository, you will have to mark this pull request as manually merged afterwards.

git switch "main"
git merge --no-ff "renovate/yq-4.x"
git switch "renovate/yq-4.x"
git rebase "main"
git switch "main"
git merge --ff-only "renovate/yq-4.x"
git switch "renovate/yq-4.x"
git rebase "main"
git switch "main"
git merge --no-ff "renovate/yq-4.x"
git switch "main"
git merge --squash "renovate/yq-4.x"
git switch "main"
git merge --ff-only "renovate/yq-4.x"
git switch "main"
git merge "renovate/yq-4.x"
git push origin "main"
Sign in to join this conversation.
Reviewers
No reviewers
Labels
Clear labels
No items
No labels
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference
robert/.dotfiles!5
No description provided.